AWS SNS Audit

SNS Topics should not allow global publishing

Ensure that your AWS Simple Notification Service (SNS) topics do not allow Everyone to publish.

SNS Topics should not allow global subscribe

Ensure that your AWS Simple Notification Service (SNS) topics do not allow "Everyone" to subscribe.

SNS Topic should be encrypted

Server-Side Encryption (SSE) must be enabled for the SNS topics. This ensures protection of sensitive data delivered as messages to subscribers.

SNS Topic should be encrypted using CMK

SNS Topics should be encrypted with Customer managed keys (CMK) instead of AWS managed keys.

Is Topic Exposed

Check if any topic is publicly accessible.

Is Subscription Secure Only

Ensure that subscribers get the data over secure-only protocol.

SNS Topic should have Subscription

Let there be no topics without subscription.

We suggest you use the checklist!

If you are not yet convinced to sign up with Cloudanix, that's not a problem. We recommend you use a comprehensive checklist which your team can use to perform a manual assessment of your workload.